"So far, ISO has published Part 1 of the Standard, which covers processes and areas such as risk management and cost control." . . . . . . .